General

  • Target

    1c942e01b72017dcc88144c2b32b9b40_JaffaCakes118

  • Size

    1012KB

  • MD5

    1c942e01b72017dcc88144c2b32b9b40

  • SHA1

    965f9a6c973368d7ac5fa28fb0548844e0c5b9b9

  • SHA256

    34751b27079e6e094c273900fcdf42f15350857743c9f3e341a4f32b26188d89

  • SHA512

    6f7195b0311baf6d81c3552e4a47e4e57021a51465f85d1a68d8e40be5c4fe78c87b1396472185dce9cce69ab6c2ba883af7f78c66a432f75849d144f68df9bd

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxo:7J5gEKNikf3hBfUiWxo

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c942e01b72017dcc88144c2b32b9b40_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections